Unscored CVE-2007-1904 EUVD-2007-1898GHSA-m63v-5p3g-vw7x

Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted re…

Published Apr 10, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. (dot dot) in a filename in a file transfer operation.

References

1017890 vdb-entry
aim-icq-filetransfer-directory-traversal(33538) vdb-entry
ADV-2007-1307 vdb-entry
1017891 vdb-entry
20070409 AOL AIM and ICQ File Transfer Path-Traversal Vulnerability third-party-advisory
24803 third-party-advisory
23391 vdb-entry
24747 third-party-advisory
ADV-2007-1306 vdb-entry